1 | /**************************************************************************** |
2 | ** |
3 | ** Copyright (C) 2013 Ruslan Nigmatullin <euroelessar@yandex.ru> |
4 | ** Contact: https://www.qt.io/licensing/ |
5 | ** |
6 | ** This file is part of the QtCore module of the Qt Toolkit. |
7 | ** |
8 | ** $QT_BEGIN_LICENSE:LGPL$ |
9 | ** Commercial License Usage |
10 | ** Licensees holding valid commercial Qt licenses may use this file in |
11 | ** accordance with the commercial license agreement provided with the |
12 | ** Software or, alternatively, in accordance with the terms contained in |
13 | ** a written agreement between you and The Qt Company. For licensing terms |
14 | ** and conditions see https://www.qt.io/terms-conditions. For further |
15 | ** information use the contact form at https://www.qt.io/contact-us. |
16 | ** |
17 | ** GNU Lesser General Public License Usage |
18 | ** Alternatively, this file may be used under the terms of the GNU Lesser |
19 | ** General Public License version 3 as published by the Free Software |
20 | ** Foundation and appearing in the file LICENSE.LGPL3 included in the |
21 | ** packaging of this file. Please review the following information to |
22 | ** ensure the GNU Lesser General Public License version 3 requirements |
23 | ** will be met: https://www.gnu.org/licenses/lgpl-3.0.html. |
24 | ** |
25 | ** GNU General Public License Usage |
26 | ** Alternatively, this file may be used under the terms of the GNU |
27 | ** General Public License version 2.0 or (at your option) the GNU General |
28 | ** Public license version 3 or any later version approved by the KDE Free |
29 | ** Qt Foundation. The licenses are as published by the Free Software |
30 | ** Foundation and appearing in the file LICENSE.GPL2 and LICENSE.GPL3 |
31 | ** included in the packaging of this file. Please review the following |
32 | ** information to ensure the GNU General Public License requirements will |
33 | ** be met: https://www.gnu.org/licenses/gpl-2.0.html and |
34 | ** https://www.gnu.org/licenses/gpl-3.0.html. |
35 | ** |
36 | ** $QT_END_LICENSE$ |
37 | ** |
38 | ****************************************************************************/ |
39 | |
40 | #include "qmessageauthenticationcode.h" |
41 | #include "qvarlengtharray.h" |
42 | |
43 | /* |
44 | These #defines replace the typedefs needed by the RFC6234 code. Normally |
45 | the typedefs would come from from stdint.h, but since this header is not |
46 | available on all platforms (MSVC 2008, for example), we #define them to the |
47 | Qt equivalents. |
48 | */ |
49 | |
50 | #ifdef uint64_t |
51 | #undef uint64_t |
52 | #endif |
53 | |
54 | #define uint64_t QT_PREPEND_NAMESPACE(quint64) |
55 | |
56 | #ifdef uint32_t |
57 | #undef uint32_t |
58 | #endif |
59 | |
60 | #define uint32_t QT_PREPEND_NAMESPACE(quint32) |
61 | |
62 | #ifdef uint8_t |
63 | #undef uint8_t |
64 | #endif |
65 | |
66 | #define uint8_t QT_PREPEND_NAMESPACE(quint8) |
67 | |
68 | #ifdef int_least16_t |
69 | #undef int_least16_t |
70 | #endif |
71 | |
72 | #define int_least16_t QT_PREPEND_NAMESPACE(qint16) |
73 | |
74 | // Header from rfc6234 with 1 modification: |
75 | // sha1.h - commented out '#include <stdint.h>' on line 74 |
76 | #include "../../3rdparty/rfc6234/sha.h" |
77 | |
78 | #undef uint64_t |
79 | #undef uint32_t |
80 | #undef uint68_t |
81 | #undef int_least16_t |
82 | |
83 | QT_BEGIN_NAMESPACE |
84 | |
85 | static int qt_hash_block_size(QCryptographicHash::Algorithm method) |
86 | { |
87 | switch (method) { |
88 | case QCryptographicHash::Md4: |
89 | return 64; |
90 | case QCryptographicHash::Md5: |
91 | return 64; |
92 | case QCryptographicHash::Sha1: |
93 | return SHA1_Message_Block_Size; |
94 | case QCryptographicHash::Sha224: |
95 | return SHA224_Message_Block_Size; |
96 | case QCryptographicHash::Sha256: |
97 | return SHA256_Message_Block_Size; |
98 | case QCryptographicHash::Sha384: |
99 | return SHA384_Message_Block_Size; |
100 | case QCryptographicHash::Sha512: |
101 | return SHA512_Message_Block_Size; |
102 | case QCryptographicHash::RealSha3_224: |
103 | case QCryptographicHash::Keccak_224: |
104 | return 144; |
105 | case QCryptographicHash::RealSha3_256: |
106 | case QCryptographicHash::Keccak_256: |
107 | return 136; |
108 | case QCryptographicHash::RealSha3_384: |
109 | case QCryptographicHash::Keccak_384: |
110 | return 104; |
111 | case QCryptographicHash::RealSha3_512: |
112 | case QCryptographicHash::Keccak_512: |
113 | return 72; |
114 | } |
115 | return 0; |
116 | } |
117 | |
118 | class QMessageAuthenticationCodePrivate |
119 | { |
120 | public: |
121 | QMessageAuthenticationCodePrivate(QCryptographicHash::Algorithm m) |
122 | : messageHash(m), method(m), messageHashInited(false) |
123 | { |
124 | } |
125 | |
126 | QByteArray key; |
127 | QByteArray result; |
128 | QCryptographicHash messageHash; |
129 | QCryptographicHash::Algorithm method; |
130 | bool messageHashInited; |
131 | |
132 | void initMessageHash(); |
133 | }; |
134 | |
135 | void QMessageAuthenticationCodePrivate::initMessageHash() |
136 | { |
137 | if (messageHashInited) |
138 | return; |
139 | messageHashInited = true; |
140 | |
141 | const int blockSize = qt_hash_block_size(method); |
142 | |
143 | if (key.size() > blockSize) { |
144 | QCryptographicHash hash(method); |
145 | hash.addData(data: key); |
146 | key = hash.result(); |
147 | hash.reset(); |
148 | } |
149 | |
150 | if (key.size() < blockSize) { |
151 | const int size = key.size(); |
152 | key.resize(size: blockSize); |
153 | memset(s: key.data() + size, c: 0, n: blockSize - size); |
154 | } |
155 | |
156 | QVarLengthArray<char> iKeyPad(blockSize); |
157 | const char * const keyData = key.constData(); |
158 | |
159 | for (int i = 0; i < blockSize; ++i) |
160 | iKeyPad[i] = keyData[i] ^ 0x36; |
161 | |
162 | messageHash.addData(data: iKeyPad.data(), length: iKeyPad.size()); |
163 | } |
164 | |
165 | /*! |
166 | \class QMessageAuthenticationCode |
167 | \inmodule QtCore |
168 | |
169 | \brief The QMessageAuthenticationCode class provides a way to generate |
170 | hash-based message authentication codes. |
171 | |
172 | \since 5.1 |
173 | |
174 | \ingroup tools |
175 | \reentrant |
176 | |
177 | QMessageAuthenticationCode supports all cryptographic hashes which are supported by |
178 | QCryptographicHash. |
179 | |
180 | To generate message authentication code, pass hash algorithm QCryptographicHash::Algorithm |
181 | to constructor, then set key and message by setKey() and addData() functions. Result |
182 | can be acquired by result() function. |
183 | \snippet qmessageauthenticationcode/main.cpp 0 |
184 | \dots |
185 | \snippet qmessageauthenticationcode/main.cpp 1 |
186 | |
187 | Alternatively, this effect can be achieved by providing message, |
188 | key and method to hash() method. |
189 | \snippet qmessageauthenticationcode/main.cpp 2 |
190 | |
191 | \sa QCryptographicHash |
192 | */ |
193 | |
194 | /*! |
195 | Constructs an object that can be used to create a cryptographic hash from data |
196 | using method \a method and key \a key. |
197 | */ |
198 | QMessageAuthenticationCode::QMessageAuthenticationCode(QCryptographicHash::Algorithm method, |
199 | const QByteArray &key) |
200 | : d(new QMessageAuthenticationCodePrivate(method)) |
201 | { |
202 | d->key = key; |
203 | } |
204 | |
205 | /*! |
206 | Destroys the object. |
207 | */ |
208 | QMessageAuthenticationCode::~QMessageAuthenticationCode() |
209 | { |
210 | delete d; |
211 | } |
212 | |
213 | /*! |
214 | Resets message data. Calling this method doesn't affect the key. |
215 | */ |
216 | void QMessageAuthenticationCode::reset() |
217 | { |
218 | d->result.clear(); |
219 | d->messageHash.reset(); |
220 | d->messageHashInited = false; |
221 | } |
222 | |
223 | /*! |
224 | Sets secret \a key. Calling this method automatically resets the object state. |
225 | */ |
226 | void QMessageAuthenticationCode::setKey(const QByteArray &key) |
227 | { |
228 | reset(); |
229 | d->key = key; |
230 | } |
231 | |
232 | /*! |
233 | Adds the first \a length chars of \a data to the message. |
234 | */ |
235 | void QMessageAuthenticationCode::addData(const char *data, int length) |
236 | { |
237 | d->initMessageHash(); |
238 | d->messageHash.addData(data, length); |
239 | } |
240 | |
241 | /*! |
242 | \overload addData() |
243 | */ |
244 | void QMessageAuthenticationCode::addData(const QByteArray &data) |
245 | { |
246 | d->initMessageHash(); |
247 | d->messageHash.addData(data); |
248 | } |
249 | |
250 | /*! |
251 | Reads the data from the open QIODevice \a device until it ends |
252 | and adds it to message. Returns \c true if reading was successful. |
253 | |
254 | \note \a device must be already opened. |
255 | */ |
256 | bool QMessageAuthenticationCode::addData(QIODevice *device) |
257 | { |
258 | d->initMessageHash(); |
259 | return d->messageHash.addData(device); |
260 | } |
261 | |
262 | /*! |
263 | Returns the final authentication code. |
264 | |
265 | \sa QByteArray::toHex() |
266 | */ |
267 | QByteArray QMessageAuthenticationCode::result() const |
268 | { |
269 | if (!d->result.isEmpty()) |
270 | return d->result; |
271 | |
272 | d->initMessageHash(); |
273 | |
274 | const int blockSize = qt_hash_block_size(method: d->method); |
275 | |
276 | QByteArray hashedMessage = d->messageHash.result(); |
277 | |
278 | QVarLengthArray<char> oKeyPad(blockSize); |
279 | const char * const keyData = d->key.constData(); |
280 | |
281 | for (int i = 0; i < blockSize; ++i) |
282 | oKeyPad[i] = keyData[i] ^ 0x5c; |
283 | |
284 | QCryptographicHash hash(d->method); |
285 | hash.addData(data: oKeyPad.data(), length: oKeyPad.size()); |
286 | hash.addData(data: hashedMessage); |
287 | |
288 | d->result = hash.result(); |
289 | return d->result; |
290 | } |
291 | |
292 | /*! |
293 | Returns the authentication code for the message \a message using |
294 | the key \a key and the method \a method. |
295 | */ |
296 | QByteArray QMessageAuthenticationCode::hash(const QByteArray &message, const QByteArray &key, |
297 | QCryptographicHash::Algorithm method) |
298 | { |
299 | QMessageAuthenticationCode mac(method); |
300 | mac.setKey(key); |
301 | mac.addData(data: message); |
302 | return mac.result(); |
303 | } |
304 | |
305 | QT_END_NAMESPACE |
306 | |